Ì¾¾Î

pkg_sign, pkg_check —

package ¤Î½ðÌ¾¤ò°·¤¦

½ñ¼°

pkg_sign [-sc] [-t type] [-u id] [-k key] [file ...] pkg_check [-sc] [-u id] [-k cert] [file ...]

²òÀâ

pkg_sign ¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤Ï°Å¹æ²½¤µ¤ì¤¿½ðÌ¾¤ò gzip ¥Õ¥¡¥¤¥ë file ¤ËËä¤á¤³¤ß¤Þ¤¹¡£ type ¤Ë¤Ï pgp (¥Ç¥Õ¥©¥ë¥È), sha1, x509 ¤¬»ØÄê¤Ç¤¤Þ¤¹¡£ type ¤ò pgp ¤Ë¤¹¤ë¤È¡¢ pgp ÈëÌ©¸°¤ÎÍøÍÑ¤ò²ÄÇ½¤Ë¤¹¤ë¤¿¤á¤Î ¥Ñ¥¹¥Õ¥ì¡¼¥ºÆþÎÏ¤òÂ¥¤¹¥×¥í¥ó¥×¥È¤¬É½¼¨¤µ¤ì¤Þ¤¹¡£ ¥Ñ¥¹¥Õ¥ì¡¼¥º¤òÀßÄê¤·¤Æ¤¤¤Ê¤¯¤Æ¤âÉ½¼¨¤µ¤ì¤Þ¤¹ (¤³¤ì¤Ï¤¤¤º¤ì¤Ë¤»¤èÎÉ¤¯¤Ê¤¤¾õ¶·¤Ç¤¹¤¬)¡£ type ¤¬ sha1 ¤Î¾ì¹ç¤Ï¡¢ id ¤ò»ØÄê¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£¤³¤ì¤Ï package (ÌõÃí: FreeBSD ¤Î package system ¤Ë¤ª¤±¤ë¥Ñ¥Ã¥±¡¼¥¸¤ò»Ø¤¹¾ì¹ç¤Ë¤³¤¦É½µ¤·¤Þ¤¹) ¤ÎÌ¾Á°¤È¤·¤ÆµÏ¿¤µ¤ì¡¢SHA1 ¥Á¥§¥Ã¥¯¥µ¥à¤È¤·¤ÆÉ½¼¨¤µ¤ì¤Þ¤¹¡£

pkg_check ¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤Ï°Å¹æ²½¤µ¤ì¤¿½ðÌ¾¤ò¥Á¥§¥Ã¥¯¤·¤Þ¤¹¡£ ¸½ºß¤Ï type ¤òÌµ»ë¤·¡¢°ìÈÖ¾å (topmost) ¤Î½ðÌ¾¤À¤±¤ò¥Á¥§¥Ã¥¯¤·¤Þ¤¹¡£ sha1 ¤ËÂÐ¤·¤Æ¤Ï¡¢ pkg_check ¤Ï¥Õ¥¡¥¤¥ë¤Î¥Á¥§¥Ã¥¯¥µ¥à¤ò¼è¤ê¡¢ ·ë²Ì¤¬ /var/db/pkg/SHA1 ¤ËµÏ¿¤µ¤ì¤Æ¤¤¤ë¥Á¥§¥Ã¥¯¥µ¥à¤Î¥ê¥¹¥È¤Ë¥Þ¥Ã¥Á¤¹¤ë¤«¤É¤¦¤«³ÎÇ§¤·¤Þ¤¹¡£

¥ª¥×¥·¥ç¥ó -s ¤ª¤è¤Ó -c ¤Ï¡Öpackage ¤Ø¤Î½ðÌ¾¡×¥â¡¼¥É¤ª¤è¤Ó¡Ö½ðÌ¾¥Á¥§¥Ã¥¯¡×¥â¡¼¥É¤ò¶¯À©¤·¤Þ¤¹¡£

pgp ¤Ç¤Ï¡¢ package ¤Ø¤Î½ðÌ¾¤ä½ðÌ¾¥Á¥§¥Ã¥¯¤ËÍÑ¤¤¤ë id ¤ò -u ¤Ç»ØÄê¤Ç¤¤Þ¤¹¡£

x509 ¤Ç¤Ï¡¢ ½ðÌ¾¥¡¼¤Þ¤¿¤Ï¸¡¾Ú¤¹¤ë¾ÚÌÀ½ñ (certificate) ¤ò -k ¥ª¥×¥·¥ç¥ó¤Ç»ØÄê¤Ç¤¤Þ¤¹¡£ »ØÄê¤·¤Ê¤¤¤È¡¢package ¤Ï°Ê²¼¤Çµ½Ò¤·¤Æ¤¤¤ë ¥Ç¥Õ¥©¥ë¥È¤Î¥¡¼¤Ç½ðÌ¾ (¥Ç¥Õ¥©¥ë¥È¤Î¾ÚÌÀ½ñ¤Ç¸¡¾Ú) ¤µ¤ì¤Þ¤¹¡£

file ¤¬¥À¥Ã¥·¥å¤Ò¤È¤Ä (‘-’) ¤À¤Ã¤¿¤ê»ØÄê¤µ¤ì¤Ê¤«¤Ã¤¿¾ì¹ç¤Ï¡¢ pkg_sign ¤ÏÉ¸½àÆþÎÏ¤«¤éÆÉ¤ß¹þ¤ß¤Þ¤¹¡£

package ¤Ø¤Î½ðÌ¾¤Ç¤Ï gzip ·Á¼°¤ÎÆÃÄ§¤òÍøÍÑ¤·¤Æ¤¤¤Þ¤¹¡£ ¤³¤ì¤Ï¡¢gzip ¤Î¥Ø¥Ã¥À¤Ë¤Ï EXTRA_FIELD ¤È¤¤¤¦¥Õ¥é¥°¤òÀßÄê¤Ç¤¡¢Í¾Ê¬¤Î¥Ç¡¼¥¿¤ò gzip ¥Ø¥Ã¥À¤È°µ½Ì¥Õ¥¡¥¤¥ë¤Î´Ö¤ËÊÝÂ¸¤Ç¤¤ë¡¢¤È¤¤¤¦¤â¤Î¤Ç¤¹¡£ OpenBSD ¤Î½ðÌ¾µ¡¹½¤Ç¤Ï¡¢ ‘SIGPGP’ + length ¤ä ‘CKSHA1’ + length ¤Î¤è¤¦¤Ê 8 ¥Ð¥¤¥È¤Î¥Þ¡¼¥«¤ò½ðÌ¾¤ËÍÑ¤¤¤Æ¤¤¤Þ¤¹ (¤³¤ì¤é¤Î¥Þ¡¼¥«¤ÏÅÁÅýÅª¤Ë 8 ¥Ð¥¤¥ÈÄ¹¤È¤Ê¤Ã¤Æ¤¤¤Þ¤¹)¡£

¿ÇÃÇ

pkg_sign ¤ª¤è¤Ó pkg_check ¤Î¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤Ï¡¢ file ¤Î¤¤¤º¤ì¤«¤Ë¤Ê¤Ë¤«ÌäÂê¤¬¤¢¤ë¤È¡¢0 ¤è¤êÂç¤¤¤½ªÎ»¥³¡¼¥É¤òÊÖ¤·¤Þ¤¹¡£ pkg_check ¤Î¾ì¹ç¡¢¤³¤ì¤ÏÄÌ¾ï package ¤¬½ðÌ¾¤µ¤ì¤Æ¤¤¤Ê¤¤¡¢ ¤¢¤ë¤¤¤Ï½ðÌ¾¤¬ÙÔÂ¤¤µ¤ì¤Æ¤¤¤ë¤³¤È¤ò°ÕÌ£¤·¤Þ¤¹¡£

File %s is already signed: ¤½¤Î gzip ¥Õ¥¡¥¤¥ë¤Ë¤Ï¡¢´û¤Ë½ðÌ¾¤¬Ëä¤á¤³¤Þ¤ì¤Æ¤¤¤Þ¤¹¡£ pkg_sign ¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤Ïº£¤Î¤È¤³¤íÊ£¿ô¤Î½ðÌ¾¤ò°·¤¤¤Þ¤»¤ó¡£
File %s is not a signed gzip file: ¤³¤Î package ¤Ë¤Ï½ðÌ¾¤¬¤¢¤ê¤Þ¤»¤ó¡£
File %s is not a gzip file: gzip ¥Ø¥Ã¥À¤¬¸«¤Ä¤«¤ê¤Þ¤»¤ó¤Ç¤·¤¿¡£
File %s contains an unknown extension: gzip ¥Õ¥¡¥¤¥ë¤Î³ÈÄ¥ÎÎ°è¤¬¡¢ÊÌ¤Î²¿¤é¤«¤ÎÍÑÅÓ¤Ë´û¤Ë»È¤ï¤ì¤Æ¤¤¤Þ¤·¤¿¡£
File %s uses old signatures, no longer supported: ¤³¤Î gzip ¥Õ¥¡¥¤¥ë¤Ï¡¢Èó¾ï¤Ë¸Å¤¤ÈÇ¤Î (¤«¤Ê¤êÃÙ¤¯¤Ê¤ë) package ½ðÌ¾¤òÍÑ¤¤¤Æ¤¤¤Þ¤¹¡£

¥Ð¥°

pgp(1) ¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤Ï¤¢¤Þ¤êÀß·×¤ÎÎÉ¤¯¤Ê¤¤¥×¥í¥°¥é¥à¤Ç¡¢ ¥¤¥ó¥¿¥Õ¥§¡¼¥¹¤ò¼è¤ë¤Î¤¬Æñ¤·¤¤¤Ç¤¹¡£ Îã¤¨¤Ð pgp ¤¬Äó¶¡¤·¤Æ¤¤¤ë¤È¤¤¤Ã¤Æ¤¤¤ë ¡ÖÊ¬Î¥½ðÌ¾µ¡Ç½ (separate signing scheme)¡× ¤ÏÉÔÊØ¶Ë¤Þ¤ê¤Ê¤¤¤â¤Î¤Ç¡¢¥Ñ¥¤¥×¤òÄÌ¤·¤Æ¤ÎÍøÍÑ¤¬¤Ç¤¤Þ¤»¤ó¡£ ¤·¤¿¤¬¤Ã¤Æ pgp_sign ¤Ç¤Ï¤³¤ì¤ò¤Ê¤ó¤È¤«¤¹¤ë¤¿¤á¤Ë¡¢ pgp ½ðÌ¾¤ÎÄ¹¤µ¤òÃÎ¤Ã¤Æ¤¤¤ë¤³¤È¤Ë¤·¤Æ¡¢ pgp ¤ò¡Ö¥·¡¼¥à¥ì¥¹¡×½ðÌ¾¥â¡¼¥É¤Çµ¯Æ°¤·¡¢ ¥Õ¥¡¥¤¥ëËÜÂÎ¤Ï°µ½Ì¤·¤Ê¤¤¤Ç½ðÌ¾¤Î¤ß¤ò¼è½Ð¤·¤Æ¤¤¤Þ¤¹¡£

pgp ¤ª¤è¤Ó¥Á¥§¥Ã¥¯¥µ¥à¥Õ¥¡¥¤¥ë¤Ø¤Î¥Ñ¥¹¤ÏÉÔÀµÍøÍÑ¤òË¸¤²¤ë¤¿¤á¤Ë ¥Ï¡¼¥É¥³¡¼¥É¤µ¤ì¤Æ¤¤¤Þ¤¹¡£¤½¤Î¤¿¤á½ÀÆðÀ¤ÏÂ»¤Ê¤ï¤ì¤Æ¤¤¤Þ¤¹¡£

´ØÏ¢¥Õ¥¡¥¤¥ë

file.sign: pkg_sign ¤¬ file ¤«¤é¥Ó¥ë¥É¤¹¤ë°ì»þ¥Õ¥¡¥¤¥ë
/var/db/pkgs/SHA1: µÏ¿ºÑ¤ß¤Î¥Á¥§¥Ã¥¯¥µ¥à

´ØÏ¢¹àÌÜ

gzip(1), pgp(1), pkg_add(1), sha1(1)

ºî¼Ô

pkg_sign ¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤Ï Marc Espie ¤¬ OpenBSD ¥×¥í¥¸¥§¥¯¥È¤Î¤¿¤á¤ËºîÀ®¤·¤Þ¤·¤¿¡£ X.509 ½ðÌ¾¤È FreeBSD ¥µ¥Ý¡¼¥È¤Ï Wes Peters ⟨wes@softweyr.com⟩ ¤¬ÄÉ²Ã¤·¤Þ¤·¤¿¡£